machinepack-arrays - npm Package Compare versions

Comparing version 4.0.1 to 4.1.0

machines/reduce.js

@@ -23,3 +23,3 @@ module.exports = {
       contract: {
-        provides: {
+        inputs: {
           item: {
@@ -46,3 +46,3 @@ friendlyName: 'Current item',
         },
-        expects: {
+        exits: {
           error: {
@@ -49,0 +49,0 @@ friendlyName: 'break with error',

package.json

 {
   "name": "machinepack-arrays",
-  "version": "4.0.1",
+  "version": "4.1.0",
   "description": "Work with arrays.",
@@ -18,6 +18,6 @@ "scripts": {
     "lodash": "^3.7.0",
-    "machine": "^9.0.1"
+    "machine": "^10.3.1"
   },
   "devDependencies": {
-    "test-machinepack-mocha": "^2.0.0"
+    "test-machinepack-mocha": "^2.1.1"
   },
@@ -24,0 +24,0 @@ "machinepack": {

upgrade-tests.js

@@ -10,7 +10,7 @@ var util = require('util');
 
-var pack = require('./');
+var packRoot = process.env.PACK_PATH || process.cwd();
 
-
+var pack = require(Paths.resolve({paths: [packRoot]}).execSync());
 Filesystem.ls({
-  dir: Paths.resolve({paths: ['./tests']}).execSync(),
+  dir: Paths.resolve({paths: [packRoot, './tests']}).execSync(),
   depth: 1
@@ -17,0 +17,0 @@ }).exec({

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

74745

increased by0.14%

Lines of code

2799

increased by0.04%

Worsened metrics

Number of low supply chain risk alerts

2

increased byInfinity%

Dependency changes

• + Added@sailshq/lodash@3.10.6(transitive)

• + Addedmachine@10.4.0(transitive)

• + Addedrttc@7.4.0(transitive)

• + Addedswitchback@2.0.5(transitive)

• - Removedlodash@2.4.2(transitive)

• - Removedmachine@9.1.2(transitive)

• - Removedrttc@4.5.2(transitive)

• - Removedswitchback@1.1.3(transitive)

• Updatedmachine@^10.3.1